Ingeniero/a de senior de GRC

GMV; Bogotá; Híbrido; COP 133.920.000 - 178.560.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

8 weeks remote work per year

Flexible working hours

Career development plan

Wellbeing program

Direct contact with Talent Acquisition

Descripción de la vacante

GMV busca un profesional senior en GRC para liderar la seguridad de la información y actuar como CISO as a Service desde nuestras oficinas de Bogotá. Se espera trabajar en un entorno internacional, asesorando a clientes y coordinando iniciativas de seguridad a nivel corporativo.

El candidato ideal tiene experiencia en marcos de referencia, gestión de riesgos y cumplimiento, y capacidad para interactuar con clientes y comités directivos, manteniendo un enfoque proactivo y orientado al negocio.

Formación

• Se requiere experiencia de 5+ años en ciberseguridad, preferentemente en GRC.
• Conocimiento de marcos de seguridad (ISO 27001, NIST, ENS) o similares.
• Experiencia trabajando con clientes y comités de seguridad.

Responsabilidades

• Actuar como CISO as a Service: definir y evolucionar la estrategia de ciberseguridad del cliente.
• Liderar actividades de Gobernanza, Riesgo y Cumplimiento (GRC).
• Definir, revisar y mantener políticas, procedimientos, estándares y marcos de seguridad.
• Identificar y evaluar riesgos y proponer planes de mitigación y su seguimiento.
• Coordinar con equipos de negocio y tecnología para integrar la seguridad en procesos.
• Cumplimiento de normativas, estándares y requisitos regulatorios.
• Colaborar en gestión de incidentes, capacidades CERT y planes de continuidad / recuperación.
• Preparar informes ejecutivos, métricas y KPIs para comités de seguridad.
• Participar en proyectos internacionales y colaborar con equipos distribuidos.

Conocimientos

GRC experiencia

Ciberseguridad

Gestión de clientes

Liderazgo

Inglés (B2)

Educación

Ingeniería/CS/Telecomunicaciones

Descripción del empleo

Ingeniero/a de senior de GRC

You will join a technology company leading strategic projects to protect the information and systems of leading organizations.

Your mission will be to act as CISO as a Service, providing strategic and operational guidance on information security, risk management, and regulatory compliance for a leading international client, working from our Bogotá offices.

You will take on a highly autonomous and responsible role, combining expertise in Governance, Risk and Compliance (GRC) with the ability to engage with clients, define security strategies, and coordinate cybersecurity initiatives.

In addition, you will work in an international environment, bringing a cross-functional security perspective and contributing to the continuous improvement of the organization's cybersecurity capabilities.

We like to get straight to the point, so we'll tell you what you won't find online. If you'd like to learn more about us, visit the GMV website.

WHAT CHALLENGE WILL YOU TAKE ON?

• Act as CISO as a Service, advising the client on defining and evolving their cybersecurity strategy.
• Lead Governance, Risk and Compliance (GRC) activities.
• Define, review, and maintain security policies, procedures, standards, and frameworks.
• Identify and assess security risks, proposing mitigation plans and monitoring their implementation.
• Coordinate with business and technology teams to ensure security is integrated into corporate processes.
• Oversee compliance with applicable regulations, standards, and regulatory requirements.
• Collaborate in incident management, CERT capabilities, and business continuity and disaster recovery planning.
• Prepare executive reports, metrics, and KPIs for management and security committees.
• Participate in international projects and collaborate with geographically distributed teams.

WHAT ARE WE LOOKING FOR IN OUR TEAM?

We are looking for a senior professional with experience in Governance, Risk and Compliance (GRC) and the ability to act as a trusted cybersecurity advisor to clients. Essential requirements include:

• Degree in Engineering, Computer Science, Telecommunications, or a related field.
• Solid experience (5+ years) in cybersecurity, particularly in GRC.
• Experience in risk management and defining security controls.
• Knowledge of security frameworks and standards (ISO 27001, NIST, ENS, or similar).
• Experience working directly with clients and participating in security committees.
• General knowledge of IT technologies and architectures.
• English proficiency at B2 level or higher.
• Technical knowledge of incident management, CERT capabilities, and business continuity.
• Certifications such as CISM, CRISC, CISA, ISO 27001 Lead Implementer/Auditor, or similar.
• Knowledge of Cloud environments and security technologies.
• Experience in international projects or CISO as a Service delivery models.
• Leadership skills, autonomy, and a client-oriented mindset.

WHAT DO WE OFFER?

We offer:

• Hybrid working model and 8 weeks of remote work per year from outside your usual geographical area.
• Flexible working hours with flexible start and finish times, plus shorter working hours on Fridays and during the summer.
• A personalized career development plan, training opportunities, and support for language learning.
• Competitive compensation with regular salary reviews, flexible benefits, and discounts on leading brands.
• Wellbeing Program: private health, dental, and accident insurance; free fruit and coffee; physical, mental, and financial wellbeing initiatives, and much more!
• Throughout our recruitment process, you will always have direct contact—by phone and in person or online—with our Talent Acquisition team. We will never ask you to make bank transfers or provide bank card details. If someone contacts you through a different process, please get in touch with the person responsible for this recruitment process.
• equal employment opportunities and we are committed to fostering an inclusive and diverse workplace.

WHAT ARE YOU WAITING FOR? JOIN US!

If you have any questions, please don't hesitate to contact Clara Sánchez Lobato, the recruiter responsible for this vacancy.